CP-10-727 Information System Recovery and Reconstitution
Information System Recovery and Reconstitution
CP-10-727
Information System Recovery and Reconstitution
Contingency Planning
Recover
Disaster Recovery Procedures
LOW, MOD, HIGH
P1
Yes
December 8, 2016
The agency's alternate storage location contains sufficient equipment to function as an alternate processing location. The information system contingency plan provides guidance for activating the alternate storage location as a disaster recovery datacenter to resume and sustain critical business functions during a contingency.
Information systems fail due to improper fault tolerant or redundant architectures.
The organization provides for the recovery and reconstitution of the information system to a known state after a disruption, compromise, or failure.
The organization has redundant processing mechanisms available in the event of natural disaster.
The state organization employs mechanisms with supporting procedures to allow the information system to be recovered and reconstituted to a known secure state after a disruption or failure.
Obtain Contingency planning policy; contingency plan; procedures addressing information system recovery and reconstitution; information system configuration settings and associated documentation; contingency plan test procedures; security plan; information system design documentation; other relevant documents or records and ascertain if
(I)the organization provides and applies mechanisms and procedures for recovery and reconstitution of the information system to known secure state after disruption or failure.
(ii) the organization defines in the security plan, explicitly or by reference, the circumstances that can inhibit recovery and reconstitution of the information system to a known state; and
